انتقل إلى المحتوى الرئيسي
English
logo

NCSC-TAD-2512-001

مستوى الخطورة: حرجة
ثغرة

الرقم المرجعي: NCSC-TAD-2512-001CVSS 0

Critical Vulnerability in React Server Components (RSC)

نوع التهديد:
غير متوفر
مستوى المشاركة (TLP):
CLEAR
CVE:
CVE-2025-55182

نظرة عامة

The NCSC becomes aware of a critical vulnerability affecting React Server Components (RSC) that allows for RCE on affected servers. Threat actors can exploit the affected components to gain unauthenticated RCE via insecure deserialization of malicious HTTP requests.

التقنيات المتأثرة

  • react-server-dom-webpack
  • react-server-dom-turbopack
  • react-server-dom-parcel

إجراءات الحد من المخاطر والإجراءات الفورية

  1. 01

    NCSC recommends all entities to identify the affected components in their environments and apply the latest available patches immediately.

  2. 02

    The center urges to report any detected suspicious cyber activities to the Cyber Monitoring Team by calling 88881 or via email at cert@ncsc.gov.bh

المراجع